An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.
☆690Oct 22, 2022Updated 3 years ago
Alternatives and similar repositories for ktrw
Users that are interested in ktrw are comparing it to the libraries listed below
Sorting:
- An IDA Toolkit for analyzing iOS kernelcaches.☆301Jul 24, 2020Updated 5 years ago
- An iOS kernel introspection tool.☆264Sep 19, 2019Updated 6 years ago
- a Ghidra framework for iOS kernelcache reverse engineering☆364Nov 6, 2022Updated 3 years ago
- an iOS kernel function hooking framework for checkra1n'able devices☆588Oct 6, 2021Updated 4 years ago
- Useful resources for iOS hacking☆1,899May 24, 2025Updated 9 months ago
- Give me tfp0, I give you jelbrek☆260Oct 28, 2020Updated 5 years ago
- iOS system call/Mach trap interception for checkra1n'able devices☆159Aug 10, 2021Updated 4 years ago
- arm64 IOKit class dumper☆292Jan 5, 2026Updated 2 months ago
- p-joker -- iOS/MacOS kernelcache/kexts analysis tool☆112May 18, 2020Updated 5 years ago
- CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesign…☆259Nov 13, 2018Updated 7 years ago
- untethered+unsandboxed code execution in iOS 11☆189Feb 16, 2020Updated 6 years ago
- xnu build script☆71Aug 31, 2023Updated 2 years ago
- iOS <13.5 sandbox escape/entitlement 0day☆339Jan 5, 2026Updated 2 months ago
- Lib kernel r/w☆190Nov 1, 2021Updated 4 years ago
- IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering☆264Feb 21, 2022Updated 4 years ago
- kernel exploit for Apple iOS 13.X☆185Nov 27, 2020Updated 5 years ago
- An IDA Toolkit for analyzing iOS kernelcaches.☆110May 15, 2025Updated 10 months ago
- Extract Binaries from Apple's Dyld Shared Cache☆469Jan 27, 2025Updated last year
- iOS 10.0-12.2 tfp0☆132Sep 3, 2019Updated 6 years ago
- Fugu is the first open source jailbreak based on the checkm8 exploit☆668May 11, 2021Updated 4 years ago
- LLDB python scripts for iOS arm64 reversing by xia0☆683May 11, 2023Updated 2 years ago
- ☆1,456Sep 16, 2021Updated 4 years ago
- Dev tools for probing IOKit☆202Sep 23, 2023Updated 2 years ago
- Tool for getting and setting nonce without triggering KPP/KTRR/PAC.☆113Apr 22, 2023Updated 2 years ago
- ☆383Dec 28, 2019Updated 6 years ago
- iOS 12.0-13.3 tfp0☆153Nov 16, 2020Updated 5 years ago
- An IDAPython module for enhancing c++ support on top of ida_kernelcache☆141May 15, 2025Updated 10 months ago
- iOS Reverse Engineering☆1,174Jun 30, 2018Updated 7 years ago
- CVE-2020-9992 - A design flaw in MobileDevice.framework/Xcode and iOS/iPadOS/tvOS Development Tools allows an attacker in the same networ…☆74Sep 23, 2020Updated 5 years ago
- ☆527Sep 28, 2025Updated 5 months ago
- XNU kernel, Kernel Collection and CodeQL build scripts☆280Mar 3, 2026Updated 2 weeks ago
- ANE kernel r/w exploit for iOS 15 and macOS 12☆303Nov 20, 2022Updated 3 years ago
- iblessing is an iOS security exploiting toolkit, it mainly includes application information gathering, static analysis and dynamic analys…☆678Feb 8, 2022Updated 4 years ago
- Binary Format of iOS 13 Sandbox Profile Collection☆52Oct 30, 2019Updated 6 years ago
- IDA plugin to find code cross references to virtual functions using PAC codes☆147Mar 16, 2022Updated 4 years ago
- Exploit for CVE-2021-30807☆134Nov 29, 2021Updated 4 years ago
- Another Virtualization.framework demo project, with focus to iBoot (WIP)☆177Dec 2, 2023Updated 2 years ago
- A tool for debugging macOS virtual machines☆113Jul 28, 2020Updated 5 years ago
- Slides from my conference presentations.☆80Aug 5, 2020Updated 5 years ago